Verkada14 дней назад
GRC Engineer
Зарплата не указана
РЫНОК
13 750 ₽медиана по профессии
Tech Lead / Team Lead · 358 вакансий с указанной зарплатой
5 092половина предложений: 9 750–18 1481,2 млн
Работодатель не указал зарплату — сравните с рынком сами.
San Mateo
Обязанности
- 01Work cross functionally with Security, IT, Engineering, Product and Legal to provide guidance on security controls implementation including effectiveness, implementation and automation
- 02Research, build and maintain tooling for testing and continuous monitoring of security controls across multiple platforms including AWS, Github
- 03Maintain the roadmap for continuous security compliance across Verkada’s Corporate, IT and Product environments with a goal of increasing automation coverage
- 04Assist in the development and maintenance of company-wide security policies, procedures, and plans
- 05Support communication to internal stakeholders regarding security and compliance best practices around applicable laws, regulations, and controls
- 06Communicate progress, escalations, and issue resolution to management and team stakeholders
- 07Create procedural documentation, including training materials or process documentation
- 08Build relationships with a broad range of Verkada employees at all levels to accomplish program objectives and further Verkada GRC goals
- 09Implement the development and oversight of required corrective action plans relating to security compliance issues
- 10Perform annual security risk assessments and prepare risk treatment plans
- 11Conduct vendor security assessments to assess risks and evaluate security postures of new and existing third-party vendors/suppliers
- 12Manage the Security Exception Process to enable Security teams to track exceptions, manage approvals, and improve automation
- 13Maintain the FAQ for customer questionnaires
- 14Collaborate on Business Impact Assessments (BIA) and annual BCP/DR activities
- 15Leverage AI and automation to scale the GRCA functions
- 16Work closely with internal and external auditors to educate them and achieve continuous compliance over technology control environment
Требования
- 01Outstanding written and spoken communication skills
- 02Ability to effectively and autonomously accomplish outcomes across cross-functional teams in ambiguous situations
- 03Ability to multitask, prioritize work and meet deadlines in a fast paced environment
- 04Experience with AWS or another cloud service provider
- 05Prior experience with software companies’ compliance
- 06Experience with audits, risk and compliance (SOC 2, ISO27001, etc.) for cloud software products
- 077+ years of security/IT compliance or equivalent experience
- 08Must be willing and able to work onsite five days per week
Условия
- 01Healthcare programs that can be tailored to meet the personal health and financial well-being needs
- 02Premiums are 100% covered for the employee under at least one plan and 80% for family premiums under all plans
- 03Nationwide medical, vision and dental coverage
- 04Health Saving Account (HSA) with annual employer contributions and Flexible Spending Account (FSA) with tax saving options
- 05Expanded mental health support
- 06Paid parental leave policy & fertility benefits
- 07Time off to relax and recharge through our paid holidays, firmwide extended holidays, flexible PTO and personal sick time
- 08Professional development stipend
- 09Wellness/fitness benefits
- 10Healthy lunches provided daily
- 11Commuter benefits
- 12We do sponsor and take over sponsorship of employment visas for this role